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See  Criminal  Internet  Communication  as  it  Happens. 

In  Real  Time  or  Recreated,  From  the  Field  or  From  Your  Desk. 
That's  Intelligence.  That's  Intellego. 
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Visual  Reconstruction  & 
Analysis  Speeds  Investigations 

DigitaL  communication  has  changed  criminal  behavior  by  remov- 
ing time  zone  and  geographic  barriers  and  increasing  the  oppor- 
tunity for  anonymity.  The  ability  to  LawfuLly  intercept,  visually 
reconstruct  and  analyze  digital  communication  is  now  a critical 
capability  for  law  enforcement  personnel.  To  meet  this  growing 
need,  SS8  developed  InteLLego. 

Powerful  features  enable  users  to  quickly  identify  communica- 
tion patterns  and  behavior  greatly  improving  the  speed  at  which 
Law  enforcement  can  work. 

MADE  FOR  LAW  ENFORCEMENT 

» Keep  up  with  ever-changing  Internet  applications 
» Quickly  identify  targets  and  their  suspected  associates 
» Simple,  secure  deployment  model  requires  minimal  training 
» Secure  p resen  lotion  and  preserve  tion  of  e vide  ntia ry  da  la 

SEE  A TARGET  S INTERNET  COMMUNICATIONS 

With  Intellego,  users  can  see  a target's  communication  exactly 
as  it  was  viewed  or  created  during  a web  session.  This  advance- 
ment significantly  speeds  up  the  investigation  process  when 
compared  to  other  applications,  which  often  require  specialized 
IT  expertise  to  dissect  IP  packet  captures  and  other  files. 


IDENTIFY  COMMUNICATION  PATTERNS 

Intellego's  communication  forensics  features  Include  a powerful 
search  engine,  social  network  analysis  (SNA)  graphing  and  SS8s 
i Dossier7’'  Internet  identify  profile  application.  These  features 
work  together  to  find  and  dispLay  communication  relationships 
and  patterns.  Forensic  algorithms  assist  users  in  identifying 
criminal  organizations,  leaders,  gatekeepers,  associates  and 
other  targets. 

See  What  They  See,  In  RealTtme 

Intellego  reconstructs  a target  s online  sessions  and  accurately 
reproduces  every  detail  By  visually  displaying  the  actual  Inter- 
net activities  of  a target— sites  visited,  chat  conversations,  email 
content,  files,  photos,  videos  - users  can  immediately  determine 
their  meaning  and  reLevance  to  an  investigation. 

VIEW  COMMUNICATION  CONTENT 

» Monitor  email  and  webmail  communications,  including  a 
target's  draft-only  emails,  attached  files , pictures  and  videos 
» Fallow  a target's  chat  sessions , in  real  time , and  then  act 
immediately  when  required 

» V7ew  visited  weh  pages,  including  uploads  and  downloads 
» Monitor  websites;  see  who  uploaded  or  downloaded  content 
» Observe  social  media  content  including  profile , friend  lists, 
photos,  and  Videos 


Intellego  IrTAction:  infaifegc  visually  end  accurately  reconstructs  weh  pages  re  fallow  the  browsing  patterns  of  a target. 
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Visual  Reconstruction:  Visual  reconstruction  of  specific  web  pages 
that  a target  has  visited  is  a key  Intellego  difference.  Investigators 
can  now  follow  the  exact  browsing  patterns  of  a target  and  quickly 
identify  unusual  or  suspect  behavior.  And  since  the  full  textual  and 
graphical  content  of  the  web  page  is  reconstructed,  they  can  save 
meaningful  portions  of  the  web  session  for  Later  analysis. 


EMAIL 


CHAT 


Intellego  displays  e-mail  text  exactly  as  it  was  seen  in  the  angi- 
nal web  application,  This  includes  the  e-mail  envelop  header 
fields— To,  From,  Cc,  Subject  and  a list  of  attachments.  With  a 
simple  click  of  a mouse,  Intellego  also  displays  email  attach- 
ments such  as  Word  documents,  Excel  spreadsheets,  photos 
and  videos. 
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Intellego  monitors  and  displays  chat  sessions  in  real  time.  Chat 
dialogues  are  shown  in  the  correct  chronological  order  so  that 
it  is  easy  to  follow  conversations  as  they  happen. 

SOCIAL  MEDIA 

Today's  social  media  applications  include  private  messaging, 
wall  posting,  news  feeds,  real-time  chat,  and  even  embedded 
email  applications.  InteLLego  makes  it  easy  for  law  enforcement 
to  view  social  media  page  content, 

WEB  BROWSING 

Visual  reconstruction  of  specific  web  pages  that  a target  has 
visited  is  a key  Into  tie  go  difference.  Investigators  can  now 
follow  the  exact  browsing  patterns  of  the  target  and  quickly 
identify  unusual  or  suspect  behavior.  And  since  the  full  textual 
and  graphical  content  of  the  web  page  is  reconstructed,  they 
can  save  meaningful  portions  of  the  web  session  for  later  analy- 
sis, evidence  or  for  use  in  identifying  additional  suspects.  As  a 
website  itseLf  may  be  the  target  of  an  investigation,  Intellego 
allows  users  to  log  the  IP  addresses  of  visitors  to  a suspicious 
website  and  identify  those  who  have  uploaded  content  to  or 
downloaded  content  from  the  site. 

i 

SUBPOENAED  BATCH  PILES 

InteLtego's  flexible,  automated  file  import  feature  allows  us- 
ers to  view,  analyze  and  reproduce  subpoenaed  emails,  packet 
capture  files  and  call  records. 


Intellego  In  Action:  U it  ilu  jo  displays  chat  sv-T.5i0.ns  in  real  tine. 
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Turning  Data  Into 
Actionable  Intelligence 

Inteilego's  communication  forensic  features  dissect  metadata 
(message  sender  identity,  recipients,  date  and  time,  duration, 
website  URL,  attachments}  revealing  patterns  and  allowing  us- 
ers to  quickly  identify  suspicious  behavior  and  relationships. 

ADVANCED  SEARCH  AND  COMPLEX  QUERY 

Inteltego  fully  indexes  alt  captured  communication  content  in- 
cluding file  types  such  as  Word  documents  and  metadata  records 
for  searches  and  queries,  returning  relevant  results  in  seconds. 
Search  criteria  may  be  as  simple  as  a name  or  keyword  or  as 
complex  as  a long  query  with  muLtiple  operators  such  as,  "find  all 
occurrences  of  people  downloading  pictures  from  a website,  be- 
tween 9pm  and  11pm  where  the  file  size  is  greater  than  400KB," 

AUTOMATED  SEARCH 

Users  can  automate  searches  to  run  in  the  background,  freeing 
their  time  for  other  investigative  tasks.  These  queries  may  be 
scheduled  to  run  periodically  or  upon  receipt  of  a communication 
event  relevant  to  a particular  case.  When  compared  with  manual 
analysis,  automated  results  are  far  more  accurate  due  to  the  tre- 
mendous volume  of  data  being  analyzed.  Email  or  SMS  message 
alerts  may  be  defined  to  notify  users  when  results  are  received. 


SOCIAL  NETWORK  ANALYSIS  (SNA) 

IntelLego  s Social  Network  Analysis  module  graphically  displays 
relationships  in  a Link  chart.  alLowing  users  to  quickly  see  com- 
munication patterns.  Users  can  select  different  chart  formats  to 
deduce  a target  s mLe,  such  as  a leader,  a communication  gate- 
keeper or  simply  a participant.  Flexible  filtering  enables  users  to 
further  hone  in  by  looking  at  events  by  time  of  day  or  application 
type,  such  as  email  or  chat  or  sociaL  media.  Inteilego’s  advanced 
SNA  algorithms  identify  islands  of  communication  automati- 
cally based  on  a specified  number  of  associates  and  degrees  of 
separation,  Additional  algorithms  assist  in  identifying  the  most 
connected  individuals,  indicating  potential  sub-group  leaders. 

VIEW  COMMUNICATION  PATTERNS 

» Create  link  charts  illustrating  relationships  between  targets 
and  discover  hierarchies  within  groups 
» Identify  key  group  members  and  hidden  relationships 
» Associate  suspicious  behavioral  patterns  to  identities 

I DOSSIER™  INTERNET  PROFILE 

iDossier  enables  the  creation  of  a target's  Internet  profile,  cor- 
relating suspected  Internet  identities  with  real-life  identities. 
Starting  with  seed  information  about  a target,  such  as  an  IP 
address,  webmail  login  id,  or  chat  handle,  InteLLego  associates 
IP  addresses  with  Login  IDs  to  suggest  aliases.  Then  users  have 
the  ability  to  add  identities  to  the  suspect's  iDossier, 
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InteLLego  In  Action:  Integrated  SOCraL  network  analysis  module  revests  wmmumGatkm  patterns  and  uncovers  hidden  relationships 
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iDossier:  Inteilego's  iDossier  enabLes  users  to  compile  an  Internet 
profile  for  a target.  iDossier  correlates  suspected  Internet  identities 
to  a target's  real-life  identity. 


Inteltego  In  Action:  Inteilego's  1 Dossier  bull d sar1  Internet  profile  ot  u suspect, 
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Made  For  Law  Enforcement 

In  tel  Lego  is  bui  Lt  upon  a secure,  robust  case  management  frame- 
work,  made  specifically  for  Law  enforcement.  An  administrator 
assigns  each  user  a role  granting  privileges  defined  for  various 
job  functions  and  departments.  The  administrator  also  assigns 
cases  to  a specific  user  or  to  multiple  users  with  access  to  a par- 
ticular case  strictly  controLLed  using  authentication  credentials 
and  enforced  by  InteLLego's  security  poLides 

As  management  of  evidence  is  imperative  for  use  in  a court  of 
Law,  InteLLego  allows  users  to  prepare  professional  reports, 
charts,  graphs  and  documents  for  case  review  by  prosecutors 
and  for  courtroom  presentation. 

EVIDENCE  MARKING 

InteUego  allows  users  to  mark  each  communication  intercept 
or  event  as  pertinent  or  non-pertinent  as  well  as  privileged  or 
non-privileged  to  meet  compliance  regulations. 

TAMPER- EVIDENT  SEAL 

InteUego  creates  an  electronic  signature  for  every  intercept 
record  in  its  database  to  validate  that  evidence  has  not  been 
altered. 

USER  ACTIVITY  LOGS 

InteUego  delivers  activity  Logs  which  provide  an  unalterable 
record  of  each  user's  activity  on  an  intercept  or  case. 

REPORTING 

InteUego  includes  fLexible  reporting  to  support  Legal  compliance 
requirements  as  well  as  for  workload  management. 

STANDARDS  COMPLIANCE 

InteUego  complies  with  all  reLevant  CALEA  and  ETSI  Lawful 
interception  standards.  InteLLego's  flexible  architecture  may  be 
adapted  easily  to  integrate  with  other  law  enforcement  analyti- 
cal applications. 


Simple.  Powerful.  Useful. 

Using  InteLLego  Client  Application,  investigators  and  analysts 
can  access  all  lawfully  intercepted  communication  records  from 
a desktop,  Laptop  or  tabLet  computer  while  in  the  office  or  the 
field.  Real-time  monitoring  allows  investigators  to  view  chats, 
text  messages  or  social  media  postings  and  react  as  they  happen, 

v 

InteLLego’s  intuitive,  easy-to-use  graphical  user  interface  re- 
quires minimal  training  and  no  specialized  computer  skills,  even 
for  the  most  complex  tasks.  Online  help  minimizes  support  re- 
quirements for  an  agency's  IT  staff, 

REAL-TIME  MONITORING  FROM  THE  FIELD 

A single  InteUego  Analytics  Platform  server,  installed  in  the  back 
office,  can  scale  to  support  more  than  a hundred  users.  Connec- 
tions to  the  server  are  accomplished  using  a secure,  encrypted 
connection  from  a standard  web  browser. 

The  Analytics  Platform  provides  the  processing  that  decodes 
and  identifies  various  Internet  applications  and  protocols.  It 
also  includes  a database  that  stores  and  indexes  communica- 
tion content  and  metadata,  A high  performance  search  engine 
can  deliver  results  from  complex  queries  of  billions  of  records 
in  seconds. 

CONTINUOUS  PROTOCOL  MONITORING 

SS8  continuously  monitors  Internet  communication  applica- 
tions and  protocols  for  changes  that  may  affect  the  ability  to 
reconstruct  or  analyze  them.  InteLLego's  modular  architecture 
allows  system  updates  to  occur  without  restarting. 

24/7  SERVICE  AND  SUPPORT 

SSB's  worldwide  phone  support  centers  provide  24/7  service 
and  support.  Our  online  technical  support  provides  the  fast  easy 
means  needed  to  get  answers  or  to  report  a problem. 

SS8  INTELLEGO  TRAINING 

SS8  offers  brief  general  overview  webinars  for  users  as  well  as 
fully-customized,  muLti-dayr  hands-on  seminars.  This  affords  law 
enforcement  agencies  the  opportunities  to  realize  the  highest 
value  from  their  investment. 
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Product  Specifications* 

CAPACITY 

» Up  to  50  concurrent  users 
» Up  to  2000  active  intercepts 
» Up  to  200  Mbps  peak  incoming  data  rate 
» Up  to  100  TB  retained  intercept  storage 

CALEA  INTERFACES 

» J-STD-25B 
» Tl-XAS 
» ETSI  TS  102.232 
» ETSI  TS  133.108 
» Packet  Capture  Files  (PCAP) 

PROTOCOL  SUPPORT 

InteUego  supports  the  following  protocols  (un-encrypted); 
» Web 

■ HTTP  Sessions,  including  embedded  audio/video  fiLes 

* Youtube 

» Chat  / IM>  including  file  transfers,  audio  and  video  calls 

* MSN  Live 

* Yahoo 

■ AOL/AIM 

- ICQ 

- GoogLeTaLk 

* Paltalk 

» Webmail,  including  attachments 

■ Hotmail  (MSN  Live) 

* Google  Mail 

* Yahoo  Mail 

» E-mail,  including  attachments 

* SMTP,  POPS,  IMAP4 

» Mobile  Messaging,  including  attachments 

* SMS 

* MMS 

» Network  Protocols 

* FTP 

» Social  Media 

* Facebook 

* Wall  Posts 

* News  Feed 

» File  imports  of  e-mails  / IM  s in  several  formats 
Including  .eml,  .mbox  and  .csv 


ANALYSIS  APPLICATIONS 

» InteUego  Query  Engine  - Perform  multi-factor  searches 
and  queries  based  on: 

* Full  text  indexes  of  intercepted  data,  both  call  content 
and  call  data 

" Time  based  behavior:  find  event  x after  evenly  occurs 
» Link  / Social  Network  Analysis  Package— Performs 
integrated  analysis  on  intercepted  or  imported 
communications  intercepts 

» iDossier™ -Creates  and  manages  an  Internet  dossier 
MANAGEMENT  SUPPORT 

» Case  Management:  Workflow  management  with  ftexibLe 
case  assignment 
» Security: 

- Full  Role -Based  Access  Controls  (RBAC) 

* Multi-Level  data  sensitivity  access  restrictions 

- Multi-tenant  capability  with  full  data  isolation 

* Full  user  activity  Logs 
» High  availability 

» Full  system  administration  through  InteLLego's  i Admin 
graphical  interface 
» SNMP  aLarming  and  error  Logging 

MINIMUM  HARDWARE  REQUIREMENTS 

» Intel  based  servers  from  IBM,  HP  and  DeLl  with  the 
following  minimum  specifications: 

■ Dual  Intel®  Xeon¥M  X5675  6 Core  / 3.06GHz  Processors 

* 48  GB  Main  memory 

* 1.8  TB  disk  space 

OPERATING  SYSTEM 
» RedHat  Enterprise  Linux  6.0 


* Many  features  shown  are  optional  consult  your  SS8 
account  representative  for  details  and  availabiLity. 
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